<script>
  window.parent.postMessage('PASS (1/2): Script can execute', '*');
  eval("window.parent.postMessage('PASS (2/2): Eval works', '*')");
</script>